When does the clock start ticking for a subject access request?

subject access time limits defined by ICO

On the face of it, it seems quite simple: you get one month to deal with a subject access request (SAR or DSAR); Article 12 of the GDPR states the information should be provided “without undue delay and in any event within one month of receipt of the request“, but exactly when does the month …

Read moreWhen does the clock start ticking for a subject access request?

ICO -v- SCL Elections case highlights data protection applies to non-EU citizens too

ICO data protection enforcement

The ICO have taken SCL Elections Ltd (AKA Cambridge Analytica) to court, and won, over a failure to comply with an enforcement notice issued to the company back in May 2018 further to a complaint and investigation that took place towards the end of 2017. Whilst Cambridge Analytica is probably best known for it’s part …

Read moreICO -v- SCL Elections case highlights data protection applies to non-EU citizens too